install fluent-bit in rhel 8-10

 Steps to Install fluent-bit in RHEL 8 10 (8-10)

vi /etc/yum.repos.d/fluent-bit.repo

add below params

[fluent-bit]
    name = Fluent Bit
    baseurl =  https://packages.fluentbit.io/rhel/8/$basearch/ 
    gpgcheck = 1
    gpgkey = https://packages.fluentbit.io/fluentbit.key
    enabled = 1 

save and exit

https://packages.fluentbit.io/rhel/9/$basearch/  for  RHEL 9 

sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm -y

sudo dnf install fluent-bit

sudo systemctl enable fluent-bit

sudo systemctl start fluent-bit    

sudo systemctl status fluent-bit 

 

CVE-2026-21962

 As part of Oracle's January 2026 Critical Patch Update (CPU), CVE-2026-21962 has been identified as a Critical vulnerability (CVSS 10.0) affecting the Oracle WebLogic Server Proxy Plug-in running on Oracle HTTP Server (Apache).

 httpd.conf

<IfModule mod_rewrite.c>
    RewriteEngine On
    # Block dot-dot-slash and traversal patterns in raw and decoded URIs
    RewriteCond %{THE_REQUEST} (\.\./|\.\.\\|%2e%2e%2f|%2e%2e/|%2e%2e%5c|%2e%2e\\) [NC,OR]
    RewriteCond %{REQUEST_URI} (\.\./|\.\.\\) [NC]
    RewriteRule .* - [F,L]
    # Block direct or nested access to administrative/internal consoles
    RewriteCond %{REQUEST_URI} ^/(console|consolehelp|em|management|bea_wls_internal|bea_wls_management_internal) [NC,OR]
    RewriteCond %{THE_REQUEST} /(console|consolehelp|em|management|bea_wls_internal|bea_wls_management_internal) [NC]
    RewriteRule .* - [F,L]
    # Block access to WebLogic Web Services Test client or internal utilities
    RewriteCond %{REQUEST_URI} ^/ws_utc [NC]
    RewriteRule .* - [F,L]
</IfModule>

 

<IfModule mod_headers.c> 
# Strip client-supplied proxy control headers before forwarding
RequestHeader unset WL-Proxy-SSL
RequestHeader unset WL-Proxy-Client-IP 
RequestHeader unset X-WebLogic-Request-Type
RequestHeader unset X-WebLogic-KeepAliveSecs 
RequestHeader unset X-Forwarded-For-Original 
</IfModule>

 

mod_wl_ohs.conf

# Restrict unauthenticated administrative path routing explicitly
<LocationMatch "^/(console|consolehelp|em|management|bea_wls_internal|bea_wls_management_internal|wls-wsat|_async|ws_utc)($|/.*)">
SetHandler default-handler
Require all denied
</LocationMatch> 

Deployer:149150

 Error :

 Deployer:149150]An IOException occurred while reading the input. : with response code '401' : with response message 'Unauthorized'

 

ENV:

weblogic 12.2.1.4 rhel linux 9 

managed servers in a cluster of servers.

 

Solution:

Ensure all servers which are part of cluster have the clock sync'd 

OHS not starting due to outofmemory error

 Error : 

OHS failing on linux

<DATE> <SEVERE> <Plugin threw out unexpected exception java.lang.OutOfMemoryError from method oracle.ohs.plugin.nodemanager.OhsProcessManagementPlugin$ProcessImpl.start(Properties props). This is very likely a BUG in plugin implementation and may lead to unexpected behavior. The legal exception allowed from this method is java.io.IOException. The unexpected exception is: java.lang.OutOfMemoryError: GC overhead limit exceeded>
java.lang.OutOfMemoryError: GC overhead limit exceeded
        at java.util.Arrays.copyOfRange(Arrays.java:3664)
        at java.lang.String.<init>(String.java:207)
        at java.lang.StringBuilder.toString(StringBuilder.java:413)
        at oracle.ohs.plugin.nodemanager.OhsSyncConfig.addConfigTree(Unknown Source)

 

Solution:

 stop nodemanger

edit  startNodeManager.sh

add  USER_MEM_ARGS

example below 

 

JAVA_OPTIONS="${JAVA_OPTIONS} -Dweblogic.RootDirectory=${DOMAIN_HOME} "
export JAVA_OPTIONS
USER_MEM_ARGS="-Xms2048m -Xmx2048m -XX:MaxMetaspaceSize=512m"
export USER_MEM_ARGS
#  Set JAVA_HOME for node manager 

 

save the file.

set USER_MEM_ARGS=-Xms2048m -Xmx2048m 

start the nodemanager 

start ohs 

Unable to start Elasticsearch

 Error: 

[2026-06-05T02:31:27,577][WARN ][o.e.b.Natives] unable to load JNA native support library, native methods will be disabled.java.lang.UnsatisfiedLinkError: /home/**/.cache/JNA/temp/jna10229199309993491088.tmp: 
/***/.cache/JNA/temp/jna10229199309993491088.tmp: failed to map segment from shared object

 

Solution:

create a new folder and provide full permission and ownership

run below commands line by line before starting elasticsearch

export ES_JAVA_OPTS="$ES_JAVA_OPTS -Djava.io.tmpdir=/***/tmp"
export ES_TMPDIR=/***/tmp
export ES_JAVA_OPTS="-Djna.tmpdir=/***/tmp"

bin/elasticsearch -d -p elasticsearch.pid